This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json) Hash identifier: Pcbf5t9fYvrQZWApAIzXUJx7Cct7EF58DOSmf3WAud0= Subject key identifier: 36:9C:90:68:D1:38:44:62:FA:E7:3A:79:4C:22:D2:E2:85:2B:66:12 Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c Certificate serial: 019C040CCD15FE26816C822EE436F2E2ED9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft Manifest number: 134B Signing time: Wed 28 Jan 2026 10:01:13 +0000 Manifest this update: Wed 28 Jan 2026 10:01:13 +0000 Manifest next update: Thu 29 Jan 2026 10:01:13 +0000 Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: 1X7nYJm2ULFnCHFtJD7jChn/eUU5M2RC8hsv4f3TRLA=) 2: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (hash: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 10:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:0c:cd:15:fe:26:81:6c:82:2e:e4:36:f2:e2:ed:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c Validity Not Before: Jan 28 10:01:13 2026 GMT Not After : Jan 29 10:01:13 2026 GMT Subject: CN=369c9068d1384462fae73a794c22d2e2852b6612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a2:b5:0a:4c:2a:8b:b9:d5:9c:77:f1:6b:70: 0d:79:c9:b7:b1:22:56:3b:4e:7b:35:0c:74:6a:12: 0c:d5:bb:e3:33:af:18:74:58:de:c3:19:0c:87:5d: 16:8e:5a:b7:73:89:f8:14:f6:02:17:27:b3:5f:d3: 6f:6a:85:6a:37:73:8b:ce:bc:95:0b:de:71:58:24: 5f:9a:0d:6f:07:49:06:ed:78:ce:23:e2:ec:f6:73: f5:8c:a9:82:6f:4e:b1:bd:ef:9c:83:b3:d9:f7:90: 19:e6:24:eb:ab:74:30:56:01:c1:5b:5b:4a:7a:df: 69:ae:65:a4:26:45:48:90:12:59:57:bf:f2:97:b6: a1:ce:a4:1a:4f:70:99:ed:15:bb:8c:c0:15:cf:b0: 46:a9:e1:89:6d:56:19:31:b0:a2:26:d7:54:ef:8a: 4a:ba:de:9e:a0:66:e8:5b:f2:35:92:ff:6b:3e:f4: 66:5e:08:4b:4e:5b:cc:f8:8b:32:50:48:0e:1a:aa: f1:c8:35:23:a1:f1:0f:61:f8:fc:02:eb:6f:4a:49: 47:6c:23:40:d5:12:89:9d:84:8d:21:d9:ac:6b:38: 22:73:0f:61:2d:12:f9:48:15:15:1e:d2:e5:ca:95: 6c:28:3e:c4:d7:ed:fd:3f:7c:92:74:e2:f5:0f:23: 1b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9C:90:68:D1:38:44:62:FA:E7:3A:79:4C:22:D2:E2:85:2B:66:12 X509v3 Authority Key Identifier: keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bb:65:08:47:ab:cf:2e:ce:70:04:71:9a:83:e7:c7:8a:d2: d0:68:11:e5:88:b2:16:3d:31:1c:8a:26:f3:f5:07:0b:9b:1b: ff:ba:16:e4:c3:67:7e:8c:fa:16:78:07:31:b8:e3:42:f5:95: 4d:c9:6d:48:52:28:00:26:37:80:96:a2:b3:3a:32:e3:08:c4: 13:76:0c:e3:d1:aa:44:fa:b7:60:07:d3:67:b0:7d:f6:02:bf: a3:d2:6e:21:2f:96:f4:76:6f:4a:27:f1:f5:19:41:90:eb:db: cb:c5:ab:fe:b3:43:69:b3:06:12:84:12:eb:d8:8b:6b:2e:cb: d5:bd:45:14:35:03:e7:5a:17:06:bf:e4:5c:b6:a0:a4:d5:fe: dc:3c:13:40:57:86:eb:7b:0a:37:03:19:d0:94:21:40:c0:18: 0d:fb:88:fb:08:e5:66:33:43:84:10:69:64:ba:bc:f4:e0:54: f8:f0:61:9e:ea:f9:9d:ae:c1:99:a6:24:23:44:84:d4:63:79: 09:24:49:05:07:14:d0:c2:67:e1:a9:aa:76:1f:72:2c:f3:17: 7b:cb:11:ea:a9:b5:df:7a:25:0a:87:d0:cd:21:fe:1c:78:c5: 57:77:37:9b:14:0e:c3:71:70:98:33:e4:a7:b1:78:26:b4:a9: f0:3a:58:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEDM0V/iaBbIIu5Dby4u2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2YxOWUxOTdiZGFmOTRlNjEwMGUwZTE3ODA4ZTEzZDQ4 NTRmOWMwHhcNMjYwMTI4MTAwMTEzWhcNMjYwMTI5MTAwMTEzWjAzMTEwLwYDVQQD EygzNjljOTA2OGQxMzg0NDYyZmFlNzNhNzk0YzIyZDJlMjg1MmI2NjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aK1Ckwqi7nVnHfxa3ANecm3sSJW O057NQx0ahIM1bvjM68YdFjewxkMh10Wjlq3c4n4FPYCFyezX9NvaoVqN3OLzryV C95xWCRfmg1vB0kG7XjOI+Ls9nP1jKmCb06xve+cg7PZ95AZ5iTrq3QwVgHBW1tK et9prmWkJkVIkBJZV7/yl7ahzqQaT3CZ7RW7jMAVz7BGqeGJbVYZMbCiJtdU74pK ut6eoGboW/I1kv9rPvRmXghLTlvM+IsyUEgOGqrxyDUjofEPYfj8AutvSklHbCNA 1RKJnYSNIdmsazgicw9hLRL5SBUVHtLlypVsKD7E1+39P3ySdOL1DyMb2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDackGjROERi+uc6eUwi0uKFK2YSMB8GA1UdIwQY MBaAFAbPGeGXva+U5hAODheAjhPUhU+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2Mjkt MzU2NTA1MzAzYzQ5LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2MjktMzU2NTA1MzAzYzQ5 LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrtlCEer zy7OcARxmoPnx4rS0GgR5YiyFj0xHIom8/UHC5sb/7oW5MNnfoz6FngHMbjjQvWV TcltSFIoACY3gJaiszoy4wjEE3YM49GqRPq3YAfTZ7B99gK/o9JuIS+W9HZvSifx 9RlBkOvby8Wr/rNDabMGEoQS69iLay7L1b1FFDUD51oXBr/kXLagpNX+3DwTQFeG 63sKNwMZ0JQhQMAYDfuI+wjlZjNDhBBpZLq89OBU+PBhnur5na7BmaYkI0SE1GN5 CSRJBQcU0MJn4amqdh9yLPMXe8sR6qm133olCofQzSH+HHjFV3c3mxQOw3FwmDPk p7F4JrSp8DpYGA== -----END CERTIFICATE-----Generated at Wed Jan 28 20:01:51 2026 by rpki-client